AMENDMENTS TO THK CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Listing of Claims; 

1. (Currently Amended) A method for using query signatures to provide 
security for a database, comprising: 

initializing a si gnature cache, wherein initializing t he signature cache 
involves trapping data base queries in a controlled environment, parsing the 
database queries to prod uce a set of valid sienatuies. and storing the valid 
signatures in the signature cache: 

receiving a query at the database; 

parsing the query at the database to determine a signature for the query, 
wherein the signature specifies a structure based on operations for the query and is 
independent of the value of literals in the query and wherein the signature is 
constructed from structured query language (SQL) keywords of the query; 

determining if the signature is located in a-the signature cache, which 
contains signatures for valid queries; and 

if so, processing the quer y, otherwise, trigg eri ng a mismatch alert 

2. (Cancelled) 

3. (Currently Amended) The method of claim-^J., wherein the mismatch 
alert throws an error. 
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1 4. (Currently Amended) The method of claim-2JL, wherein the mismatch 

2 alert is sent to a database administrator and the query is processed. 

1 5. (Currently Amended) The method of claim-5_l, wherein the mismatch 

2 alert is sent to a requesting application, thereby allowing the requesting 

3 application to take action. 

1 6. (Cancelled) 

1 7. (Original) The method of claim 1, wherein if the signature generates a 

2 mismatch alert and if the query is a valid query, the method further comprises 

3 allowing a database administrator to add the signature to the signature cache. 

1 8. (Currently Amended) A computer-readable storage medium storing 



2 instructions that when executed by a computer cause the computer to perform a 

3 method for using query signatures to provide security for a database, wherein the 

4 computer-readable storage medium includes magnetic and optical storage devices, 

5 disk drives, magnetic tape, CDs (compact discs), and DVDs (digital versatile discs 

6 or digital video discs), the method comprising: 



7 initializing a signatui-e cache, wherein initializing the signature cache 

8 involves trapping database queries in a controlled environment, parsing the 

9 database queries to produce a set of valid signatures, and storing the valid 

10 signatures in the signature cache: 

1 1 receiving a query at the database; 

12 parsing the query at the database to determine a signature for the query, 

1 3 wherein the signature specifies a structure based on operations for the query and is 

14 independent of the value of literals in the query and wherein the signature is 

1 5 constructed from structured query language (SQL) keywords of the query; 
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16 determining if the signature is located in-a the signature cache, which 

17 contains signatures for valid queries; and 

1 8 if so, processing the query , otherwise, triggering a mismatch alert . 
1 9. (Cancelled) 

1 1 0. (Currently Amended) The computer-readable storage medium of claim 

2 9_8, wherein the mismatch alert throws an error. 

1 11. (Currently Amended) The computer-readable storage medium of claim 

2 9_8, wherein the mismatch alert is sent to a database administrator and the query is 

3 processed. 

1 12. (Currently Amended) The computer-readable storage medium of claim 

2 9_8, wherein the mismatch alert is sent to a requesting application, thereby 

3 allowing the requesting application to take action. 

1 13. (Cancelled) 

1 14. (Original) The computer-readable storage medium of claim 8, wherein 

2 if the signature generates a mismatch alert and if the query is a valid query, the 

3 method further comprises allowing a database administrator to add the signature 

4 to the signature cache. 

1 15. (Currently Amended) An apparatus for using query signatures to 

2 provide security for a database, comprising: 

3 an initialization mechanism configured to initialize a signature cache, 

4 wherein when initializing the signature cache, the mechanism is configured to trap 
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5 database queries in a controlled environment, parse the database queries to 

6 produce a set of valid signatures, and store the valid signatures in the signature 

7 cache; 

8 a receiving mechanism configured to receive a query at the database; 

9 a parsing mechanism configured to parse the query at the database to 

1 0 determine a signature for the query, wherein the signature specifies a structure 

1 1 based on operations for the query and is independent of the value of literals in the 

1 2 query and wherein the signature is constructed iSrom structured query language 

1 3 (SQL) keywords of the query; 

14 a matching mechanism configured to determine if the signature is located 

1 5 in-a the signature cache, which contains signatures for valid queries; aftd 

1 6 a processing mechanism configured to process the quer y if the signature is 

17 located in the signature cache: and 

18 an alerting mechanism configured to trigger a mismatch alert if the 

19 signature is not located in the signature cache . 

1 16. (Cancelled) 

1 1 7. (Currently Amended) The apparatus of claim-46 15, wherein the 

2 mismatch alert throws an error. 

1 18. (Currently Amended) The apparatus of claim46_15, wherein the 

2 mismatch alert is sent to a database administrator and the query is processed. 

1 19. (Currently Amended) The apparatus of claim44 15, wherein the 

2 mismatch alert is sent to a requesting application, thereby allowing the requesting 

3 application to take action. 
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20. (Cancelled) 



21. (Original) The apparatus of claim 15, further comprising an adding 
mechanism configured to allow a database administrator to add the signature to 
the signature cache if the signature generates a mismatch alert and if the query is a 
valid query. 
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